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DETAILED ACTION 

1. Claims 1-19 are pending in this office action. Claims 16-19 are newly added. 

2. Applicant's arguments, filed March 9, 2005, have been considered and are 
persuasive. However, a new ground of rejection is made. 

Drawings 

3. The drawing objections are corrected. 

Rejections 

4. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

5. Claims 1-19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Zoka (U.S. Patent No. 6,591,249) in view of Johnson (U.S. Patent No. 6,529,885). 

Regarding claim 1 , Zoka teaches a biometric authentication system comprising a 
first enterprise system, a second enterprise system, and a communication network 
interconnecting the first enterprise system and the second enterprise system (fig. 5, ref. 
num 24, 30, and 48), wherein: 

The first enterprise system includes: 
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• A registration apparatus for acquiring a user's biometric information in advance of 
authentication, extracting features therefrom, and converting the features to 
template data (fig. 3), 

• A first authentication apparatus for acquiring the user's biometric information 
during authentication, extracting features therefrom, and converting the features 
to authentication data (fig. 2, r.ef. num 16), and 

• A first database server apparatus for receiving the template data from the 
registration apparatus, storing and managing the template data, receiving the 
authentication data from the first authentication apparatus during authentication, 
comparing the authentication data with the template data, thereby authenticating 
the user (fig. 6 and 7); and 

The second enterprise system includes: 

• A second authentication apparatus for acquiring the user's biometric information, 
extracting features therefrom, and converting the features to authentication data 
(fig. 5 and col. 8, line 61 through col. 9, line 3). 

Zoka does not teach a second database server apparatus for receiving the 
authentication data from the second authentication apparatus, requesting corresponding 
template data from the first database server apparatus, receiving the corresponding 
template data from the first database server apparatus, comparing the authentication 
data with the corresponding template data, thereby authenticating the user, and storing 
and managing the received template data if the user is authenticated successfully. 
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Johnson teaches a second database server apparatus for receiving the 
authentication data from the second authentication apparatus, requesting corresponding 
template data from the first database server apparatus, receiving the corresponding 
template data from the first database server apparatus, comparing the authentication 
data with the corresponding template data, thereby authenticating the user, and storing 
and managing the received template data if the user is authenticated successfully (fig. 
2, col. 6, lines 31-49, and col. 12, line 27 through col. 14, line 19). 

It would have been obvious to one or ordinary skill in the art, at the time the 
invention was made, to combine the second database server apparatus receiving 
authentication data from the second apparatus, requesting template data from the first 
apparatus, comparing the received data with the generated data, and storing the 
received template data, as taught by Johnson , with the system of Zoka. It would have 
been obvious for such modifications because storing initial authentication information at 
a source that a user trusts (the web buyer's home bank) provides user trust in online 
systems. Also, only allowing non-critical data to be supplied to the web seller helps 
prevent critical data (passwords, account information) from being transmitted across 
open networks (see col. 14, lines 20-64 of Johnson). 

Regarding claim 2 , Zoka as modified by Johnson teaches wherein the second 
database server apparatus sends the authentication data received from the second 
authentication apparatus to the first database server apparatus, and the first database 
server apparatus includes a one-to-many biometric identification unit that performs a 
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one-to-many comparison between the authentication data received from the second 
database server apparatus and all of the template data stored and managed by the first 
database server apparatus to find the template data corresponding to the authentication 
data (see col. 9, lines 3-19 of Zoka). 

Regarding claims 3, 6, and 10 , Zoka as modified by Johnson teaches wherein 
the first database server apparatus includes a billing unit that charges the second 
enterprise system a fee when the second database server apparatus requests 
corresponding template data and the first database server apparatus sends the 
corresponding template data and personal information to the second database server 
apparatus (see col. 13, lines 50-52 of Johnson). 

Regarding claim 4 , Zoka as modified by Johnson teaches wherein the second 
database server apparatus sends the authentication data received from the second 
authentication apparatus to the first database server apparatus when requesting the 
corresponding template data, and the first database server apparatus includes a one-to- 
many biometric identification unit that performs a one-to-many comparison between the 
authentication data received from the second database server apparatus and all of the 
template data stored and managed by the first database server apparatus to find the 
template data corresponding to the authentication data (see col. 9, lines 3-19 of Zoka). 

Regarding claim 5 , Zoka as modified by Johnson teaches wherein: 
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• The first database server apparatus includes a first personal-information 
database storing personal information about the user (see col. 5, lines 40-46 of 
Zoka); 

• When the first database server apparatus sends the corresponding template data 
to the second database server apparatus, the first database server apparatus 
also sends the personal information about the user to the second database 
server apparatus (see col. 9, lines 1 1-19 of Zoka); and 

• The second database server apparatus includes a second personal-information 
database that stores and manages the personal information about the user 
received from the first database server apparatus (see col. 14, lines 5-19 of 
Johnson). 

Regarding claim 7 . Zoka teaches a biometric authentication system comprising a 
first enterprise system, a second enterprise system, and a communication network 
interconnecting the first enterprise system and the second enterprise system (fig. 5, ref. 
num 24, 30, and 48), wherein: 

The first enterprise system includes: 

• A registration apparatus for acquiring a user's biometric information in advance of 
authentication, extracting features therefrom, and converting the features to 
template data (fig. 3), 

• A first authentication apparatus for acquiring the user's biometric information 
during authentication, extracting features therefrom, and converting the features 
to authentication data (fig. 2, ref. num 16), and 
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• A first database server apparatus for receiving the template data from the 
registration apparatus, storing and managing the template data, receiving the 
authentication data from the first authentication apparatus during authentication, 
comparing the authentication data with the template data, thereby authenticating 
the user, receiving authentication data from the second enterprise system, and 
returning corresponding template data to the second enterprise system if the 
corresponding template data is stored in the first database server apparatus (fig. 
6 and 7 and col. 9, lines 3-19); and 

The second enterprise system includes: 

• A simplified registration apparatus for acquiring the user's biometric information 
during registration, extracting features therefrom, and converting the features to 
authentication data (col. 1, lines 7-16), 

• A second authentication apparatus for acquiring the user's biometric information 
during authentication, extracting features therefrom, and converting the features 
to authentication data (fig. 5 and col. 8, line 61 through col. 9, line 3). 

Zoka does not teach a second database server apparatus for receiving the 
authentication data from the simplified registration apparatus and the second 
authentication apparatus, sending the authentication data received from the simplified 
registration apparatus to the first database server apparatus, receiving the 
corresponding template data from the first database server apparatus, storing and 
managing the received template data, and comparing the authentication data received 
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from the second authentication apparatus with the stored template data, thereby 
authenticating the user. 

Johnson teaches a second database server apparatus for receiving the 
authentication data from the simplified registration apparatus arid the second 
authentication apparatus, sending the authentication data received from the simplified 
registration apparatus to the first database server apparatus, receiving the 
corresponding template data from the first database server apparatus, storing and 
managing the received template data, and comparing the authentication data received 
from the second authentication apparatus with the stored template data, thereby 
authenticating the user (fig. 2, col. 6, lines 31-49, and col. 12, line 27 through col. 14, 
line 19). 

It would have been obvious to one or ordinary skill in the art, at the time the 
invention was made, to combine the second database server apparatus receiving 
authentication data from the second apparatus, requesting template data from the first 
apparatus, comparing the received data with the generated data, and storing the 
received template data, as taught by Johnson , with the system of Zoka . It would have 
been obvious for such modifications because storing initial authentication information at 
a source that a user trusts (the web buyer's home bank) provides user trust in online 
systems. Also, only allowing non-critical data to be supplied to the web seller helps 
prevent critical data (passwords, account information) from being transmitted across 
open networks (see col. 14, lines 20-64 of Johnson). 
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Regarding claim 8 , Zoka teaches a database server apparatus for use in a first 
enterprise system that is linked by a communication network to a second enterprise 
system (fig. 5, ref. num 24, 30, and 48), for receiving biometric template data and 
biometric authentication data from the first enterprise system, storing and managing the 
biometric template data (fig. 6 and 7), comparing the biometric authentication data with 
the biometric template data, thereby authenticating users of the first enterprise system. 

Zoka does not teach supplying the biometric template data on request to the 
second enterprise system to enable users of the first enterprise system to become 
registered with the second enterprise system. 

Johnson teaches supplying the biometric template data on request to the second 
enterprise system to enable users of the first enterprise system to become registered 
with the second enterprise system (fig. 2, col. 6, lines 31-49, and col. 12, line 27 through 
col. 14, line 19). 

It would have been obvious to one or ordinary skill in the art, at the time the 
invention was made, to combine supplying template data to the second apparatus upon 
request to enable users of the first apparatus to become registered with the second 
apparatus, as taught by Johnson , with the apparatus of Zoka . It would have been 
obvious for such modifications because storing initial authentication information at a 
source that a user trusts (the web buyer's home bank) provides user trust in online 
systems. Also, only allowing non-critical data to be supplied to the web seller helps 
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prevent critical data (passwords, account information) from being transmitted across 
open networks (see col. 14, lines 20-64 of Johnson). 

Regarding claim 9 , Zoka as modified by Johnson teaches comprising a one-to- 
many biometric identification unit that performs a one-to-many comparison between 
biometric authentication data received from the second enterprise system and the 
biometric template stored and managed by the first database server apparatus to find 
the biometric template data requested by the second enterprise system (see col. 9, lines 
3-19 of Zoka). 

Regarding claim 11 . Zoka as modified by Johnson teaches comprising a 
personal-information database storing personal information about the users of the first 
enterprise system, the personal information being sent to the second enterprise system 
together with the biometric template data requested by the second enterprise system 
(see col. 5, lines 40-46 of Zoka). 

Regarding claim 12 , Zoka as modified by Johnson teaches wherein the database 
server apparatus receives biometric authentication data from the second enterprise 
system, compares the received biometric authentication data with the requested 
biometric template data, and sends the requested biometric template data to the second 
enterprise system only if the received biometric authentication data match the requested 
biometric template data (see fig. 2, col. 6, lines 31-49, and col. 12, line 27 through col. 
14, line 19 of Johnson). 
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Regarding claim 13 , Zoka teaches a database server apparatus for use in a 
second enterprise system that is linked by a communication network to a first enterprise 
system (fig. 5, ref. num 24, 30, and 48), for receiving biometric authentication data from 
the second enterprise system (col. 1, lines 7-16). 

Zoka does not teach requesting corresponding biometric template data from the 
first enterprise system, receiving the requested biometric template data from the first 
enterprise system, storing and managing the received biometric template data, and 
comparing the biometric authentication data with the stored biometric template data, 
thereby authenticating users of the second enterprise system. 

Johnson teaches requesting corresponding biometric template data from the first 
enterprise system, receiving the requested biometric template data from the first 
enterprise system, storing and managing the received biometric template data, and 
comparing the biometric authentication data with the stored biometric template data, 
thereby authenticating users of the second enterprise system (fig. 2, col. 6, lines 31-49, 
and col. 12, line 27 through col. 14, line 19). 

It would have been obvious to one or ordinary skill in the art, at the time the 
invention was made, to combine requesting template data from the first apparatus, 
storing the received template data, and comparing the received template data with the 
produced data for authenticating the user, as taught by Johnson , with the apparatus of 
Zoka . It would have been obvious for such modifications because storing initial 
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authentication information at a source that a user trusts (the web buyer's home bank) 
provides user trust in online systems. Also, only allowing non-critical data to be 
supplied to the web seller helps prevent critical data (passwords, account information) 
from being transmitted across open networks (see col. 14, lines 20-64 of Johnson). 

Regarding claim 14 , Zoka as modified by Johnson teaches wherein the database 
server apparatus sends the biometric authentication data received from the second 
enterprise system to the first enterprise system when requesting the corresponding 
biometric template data from the first enterprise system (see col. 12, lines 42-56 of 
Johnson). 

Regarding claim 15 , Zoka as modified by Johnson teaches comprising a 
personal-information database for storing personal information about the users of the 
second enterprise system, the personal information being received from the first 
enterprise system together with the requested biometric template data (see col. 9, lines 
11 -19 of Zoka). 

Regarding claims 16-19 , Zoka as modified by Johnson teaches wherein the first 
enterprise system receives the user's biometric information from the second enterprise 
system, uses the user's biometric information to retrieve the template data, and sends 
the retrieved template data to the second information system; and wherein the second 
enterprise information system performs authentication using the retrieved template data 
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sent by the first enterprise system (see fig. 2, col. 6, lines 31-49, and col. 12, line 27 
through col. 14, line 19 of Johnson). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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